Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Oracle WebLogic Server, Injection
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2019-2725- Public snapshot refreshed
- today 17:32 UTC
- Distinct source events
- 2
- Source records represented
- 2
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Fri 26 Apr · Dated source evidence · Security advisory Oracle Security Alert for CVE-2019-2725 - 26 Apr 2019Oracle Security Alerts Source: Oracle Security Alerts · source check: today 17:32 UTCYour review: not selected in your watchlist or stack; no review is inferred.
- Mon 10 Jan · Dated source evidence · Oracle · exploited, added to CISA KEV Oracle WebLogic Server, InjectionCVE-2019-2725 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.CISA lists it as exploited, including by ransomware